On 28.04.2021 at 16:47, Nikita Popov wrote:
> On Wed, Apr 28, 2021 at 4:18 PM Joe Watkins wrote:
>
>> That's a good point.
>>
>> I suppose the most we can do is prevent accidental committing of such
>> things.
>>
>> Appears to be two "solutions" ...
>>
>> We could distribute a pre-commit hook, wh
On Wed, Apr 28, 2021 at 4:18 PM Joe Watkins wrote:
> That's a good point.
>
> I suppose the most we can do is prevent accidental committing of such
> things.
>
> Appears to be two "solutions" ...
>
> We could distribute a pre-commit hook, which is somewhere between "not
> bad", and "pretty awkwar
Actually the detached signatures are not part of the normal commit process
(doesn't look like they'll be in logs either), but the tag that you need to
make the release archive is ...
So we'd really want restriction on creating tags, somehow ...
Possibly we could also emulate some of the protectio
That's a good point.
I suppose the most we can do is prevent accidental committing of such
things.
Appears to be two "solutions" ...
We could distribute a pre-commit hook, which is somewhere between "not
bad", and "pretty awkward" if your git installation is old.
We could setup one of the unused
On Tue, Apr 27, 2021 at 4:41 PM Christoph M. Becker
wrote:
> Hi all,
>
> the distributions repo[1] is huge (current ~ 26GiB), and it will grow
> further over time; that causes issues when trying to check it out[2],
> and frankly, I don't see why were having the tarballs in a VCS at all.
>
> Would
On 28.04.2021 at 07:33, Joe Watkins wrote:
> RE vendor lock-in: Any provider we may move to in the future is going to
> have to be based on git,
> and are going to have similar features to github with regard to providing
> signatures.
Vendor lock-in is a good point, but I see no real issues with
Morning all,
I'd be very up for that ...
The "alternative workflow" in this document seems reasonable for us to use
(or modify for use):
https://wiki.debian.org/Creating%20signed%20GitHub%20releases
RE vendor lock-in: Any provider we may move to in the future is going to
have to be based on gi
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512
On 2021-04-27 at 15:00, b...@benramsey.com wrote:
> > On Apr 27, 2021, at 09:41, Christoph M. Becker
wrote:
> >
> > Hi all,
> >
> > the distributions repo[1] is huge (current ~ 26GiB), and it will grow
> > further over time; that causes issues when
> On Apr 27, 2021, at 09:41, Christoph M. Becker wrote:
>
> Hi all,
>
> the distributions repo[1] is huge (current ~ 26GiB), and it will grow
> further over time; that causes issues when trying to check it out[2],
> and frankly, I don't see why were having the tarballs in a VCS at all.
>
> Woul
Hi all,
the distributions repo[1] is huge (current ~ 26GiB), and it will grow
further over time; that causes issues when trying to check it out[2],
and frankly, I don't see why were having the tarballs in a VCS at all.
Wouldn't it be more suitable to make the tarballs available somewhere
else? S
10 matches
Mail list logo
